This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json) Hash identifier: 21ETzsT5qmagfNh2G7BoDyfjfqe1L23o8TujYQG2XIM= Subject key identifier: DE:4B:CB:4C:8D:17:39:BD:87:0F:DA:80:08:2C:63:E5:D3:9C:02:26 Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6 Certificate serial: 019C4510999554B3E82587C936A53D396000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft Manifest number: 0CA0 Signing time: Tue 10 Feb 2026 01:00:41 +0000 Manifest this update: Tue 10 Feb 2026 01:00:41 +0000 Manifest next update: Wed 11 Feb 2026 01:00:41 +0000 Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: cTJWwjENenuQn+LjrBzCoIGdhmE1nmRKizDEQXBQ3HQ=) 2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:99:95:54:b3:e8:25:87:c9:36:a5:3d:39:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6 Validity Not Before: Feb 10 01:00:41 2026 GMT Not After : Feb 11 01:00:41 2026 GMT Subject: CN=de4bcb4c8d1739bd870fda80082c63e5d39c0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:a6:6e:98:4a:dc:87:21:20:60:58:4a:a5: 31:7d:8b:6e:06:73:f1:af:4b:8e:6a:7d:ec:de:0a: 92:da:77:5d:95:e7:39:32:9b:fc:4f:2e:ae:11:6e: 20:ec:54:22:21:4f:c9:d5:16:f5:ce:f2:2c:25:10: 67:e2:1d:2a:0c:b0:97:9b:51:d0:0b:a0:e7:28:ef: ae:8d:45:71:d4:7b:96:52:dc:94:21:d7:43:ec:63: 9d:ba:4f:62:af:8f:0d:8a:89:c7:72:f3:26:b4:83: 2a:53:20:ad:a7:b4:0e:8e:6d:f9:2f:2b:11:a9:1e: ef:0c:d2:0e:a3:93:4f:de:7a:e3:c9:67:22:1e:e1: 3a:89:7f:87:1a:a5:c8:b5:c8:ba:f3:9e:67:15:f6: 3c:6a:f6:c3:74:fe:6f:b0:5a:1b:75:8d:71:91:4b: f2:b1:f3:35:6c:cc:da:8e:df:94:a3:8a:2e:cf:7a: d9:85:3a:f6:b2:61:31:d5:43:9c:b9:28:e5:ac:e7: f7:12:0a:8d:5c:bd:6e:58:c6:12:4b:20:98:ba:7d: c8:5b:ca:b9:91:a2:2b:d0:03:1d:42:85:3c:34:a8: 4f:50:39:da:b7:cc:30:a0:1c:72:33:4e:b2:2d:91: c0:cd:bc:d2:b5:78:9e:5f:ec:34:b2:35:ae:ee:04: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4B:CB:4C:8D:17:39:BD:87:0F:DA:80:08:2C:63:E5:D3:9C:02:26 X509v3 Authority Key Identifier: keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:99:6c:ca:a0:70:d2:fd:ff:63:45:2e:59:06:5e:67:a0:52: dc:04:4f:a7:8a:cc:9f:d8:ea:0d:9d:d6:91:ac:6f:0f:85:66: b8:4c:c1:be:3e:91:b6:79:03:1b:da:fc:02:98:33:d8:71:02: 9c:c1:a5:9b:6f:e0:47:82:4b:ec:67:83:02:5d:de:19:71:85: e9:87:cf:62:d1:ca:10:ee:52:08:80:1b:c8:b0:18:1e:9b:9e: 1a:a9:d5:3b:f7:8f:66:23:95:62:d0:dc:92:2a:06:2f:71:ff: 27:58:b6:08:19:dd:11:6c:ef:8c:ad:89:de:1e:29:71:56:2a: c1:03:70:1a:3d:1a:5c:20:63:aa:9a:4b:80:8c:c8:54:ad:3d: 8e:b5:2f:a6:3a:b1:99:6c:58:78:a5:3d:16:cc:3e:3d:62:9b: 6f:84:13:d3:8d:c3:22:0f:c6:cb:c8:67:8d:89:62:1a:0c:3c: a9:8a:15:c6:ef:41:4c:5f:55:3c:31:1c:a0:b0:0b:6a:4a:49: d9:0d:44:84:d2:3a:f6:2a:0f:2f:4c:72:ec:98:1b:e0:5f:3f: 35:5e:1f:37:32:75:a2:57:85:94:73:0e:dc:9e:6f:ac:ae:83: 60:55:ae:48:c8:2c:b9:47:f3:6f:df:dc:63:70:ac:90:42:37: 09:d3:a2:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEJmVVLPoJYfJNqU9OWAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj NDE5ZDYwHhcNMjYwMjEwMDEwMDQxWhcNMjYwMjExMDEwMDQxWjAzMTEwLwYDVQQD EyhkZTRiY2I0YzhkMTczOWJkODcwZmRhODAwODJjNjNlNWQzOWMwMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c6mbphK3IchIGBYSqUxfYtuBnPx r0uOan3s3gqS2nddlec5Mpv8Ty6uEW4g7FQiIU/J1Rb1zvIsJRBn4h0qDLCXm1HQ C6DnKO+ujUVx1HuWUtyUIddD7GOduk9ir48NionHcvMmtIMqUyCtp7QOjm35LysR qR7vDNIOo5NP3nrjyWciHuE6iX+HGqXItci6855nFfY8avbDdP5vsFobdY1xkUvy sfM1bMzajt+Uo4ouz3rZhTr2smEx1UOcuSjlrOf3EgqNXL1uWMYSSyCYun3IW8q5 kaIr0AMdQoU8NKhPUDnat8wwoBxyM06yLZHAzbzStXieX+w0sjWu7gQnVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5Ly0yNFzm9hw/agAgsY+XTnAImMB8GA1UdIwQY MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4 LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVplsyqBw 0v3/Y0UuWQZeZ6BS3ARPp4rMn9jqDZ3WkaxvD4VmuEzBvj6RtnkDG9r8Apgz2HEC nMGlm2/gR4JL7GeDAl3eGXGF6YfPYtHKEO5SCIAbyLAYHpueGqnVO/ePZiOVYtDc kioGL3H/J1i2CBndEWzvjK2J3h4pcVYqwQNwGj0aXCBjqppLgIzIVK09jrUvpjqx mWxYeKU9Fsw+PWKbb4QT043DIg/Gy8hnjYliGgw8qYoVxu9BTF9VPDEcoLALakpJ 2Q1EhNI69ioPL0xy7Jgb4F8/NV4fNzJ1oleFlHMO3J5vrK6DYFWuSMgsuUfzb9/c Y3CskEI3CdOiCw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:38 2026 by rpki-client